Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Cyber Wiki Learning Path

Embedded and Connected Device Security

Secure device identity, networks, firmware, boot, debug interfaces, updates, healthcare devices, and vehicle ecosystems across long product lifecycles.

Recommended Sequence

13 connected entries

All learning paths
Cyber-physical risk domain · Advanced

Automotive Cybersecurity

Automotive cybersecurity protects vehicle electronic systems, software, communications, data, update infrastructure, service tools, manufacturing, and cloud services while preserving safety, reliability, privacy, and long product lifecycles.

Embedded technology foundation · Advanced

Embedded Systems Security

Embedded systems security protects purpose-built computing devices whose software, hardware, interfaces, timing, physical environment, and long support lifecycle are tightly coupled to a product or physical process.

Embedded security testing practice · Advanced

Firmware Analysis

Firmware analysis examines the software image and supporting metadata that control an embedded device to identify architecture, components, configuration, secrets, services, update logic, vulnerabilities, and runtime behavior.

Software authenticity control · Advanced

Firmware Signing

Firmware signing uses protected private keys and verified metadata to let a bootloader, device, installer, or update service determine that firmware was authorized by the product owner and has not been modified since signing.

Cryptography and trust concept · Intermediate

Hardware Security Modules

Hardware Security Modules is a cybersecurity concept used to describe, protect, analyze, or operate an important part of a modern information environment.

Systems security concept · Intermediate

Internet of Things Security

Internet of Things Security is a cybersecurity concept used to describe, protect, analyze, or operate an important part of a modern information environment.

Connected-device identity concept · Advanced

IoT Device Identity

IoT device identity is the set of cryptographic and lifecycle mechanisms used to distinguish one physical or logical device from another, authenticate it to services and peers, and bind actions and data to an accountable device record.

Connected-device network control · Intermediate

IoT Network Segmentation

IoT network segmentation places connected devices into controlled zones and communication paths according to function, trust, ownership, and consequence so compromise of one device does not provide unrestricted access to users, servers, management systems, or other devices.

Connected-device lifecycle control · Advanced

IoT Secure Update Mechanisms

IoT secure update mechanisms let a device authenticate update metadata and payloads, verify integrity and authorization, install changes safely, resist rollback, recover from failure, and report update state throughout a long product lifecycle.

Hardware interface security concept · Advanced

JTAG and UART Security

JTAG and UART security controls debug, test, programming, and serial interfaces that can expose firmware, memory, boot state, credentials, consoles, and privileged device control when physically accessible.

Cyber-physical risk domain · Advanced

Medical Device Cybersecurity

Medical device cybersecurity manages the confidentiality, integrity, availability, authenticity, resilience, and safe operation of connected or software-enabled devices throughout design, clinical use, maintenance, vulnerability response, and retirement.

Systems security concept · Intermediate

Secure Boot

Secure Boot concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.

Embedded platform-security control · Advanced

Secure Boot for Embedded Devices

Secure boot for embedded devices creates a chain of verified software from an initial trusted component through bootloader, operating system, firmware, and application so unauthorized code is not executed during startup.